NymVPN
MixnetDecentralised mixnet VPN that hides metadata, not just your IP, with a 5-hop noise-generating mix network.
nym.com/ ↗- Jurisdiction
- Switzerland
- Founded
- 2018
- Owner
- Nym Technologies SA
- Best price
- $2.25/mo
- Devices
- 10
- Free tier
- No
Mixnet VPN. Routes traffic through a multi-hop mix network with cover traffic, resisting the traffic-correlation attacks ordinary VPNs can't.
Best for
- · High-risk users who need metadata protection, not just IP-hiding
- · Activists, journalists and crypto users facing traffic-analysis adversaries
- · People who want anonymous payment (Monero, Zcash, cash, GNU Taler)
Not ideal for
- · Streaming / high-bandwidth use in Anonymous Mode (5 hops add latency)
- · Users wanting a large country/server menu like a commercial VPN
- · People who want a mature, set-and-forget consumer app
Strengths
- ✓5-hop noise-generating mixnet resists the traffic-correlation attacks ordinary VPNs can't
- ✓Fully open-source clients (Rust) with a strong public audit trail (Aumasson 2021, Oak 2023, Cure53 2024)
- ✓Outside 14 Eyes (Switzerland); zk-nym credentials decouple payment from traffic
- ✓Wide anonymous payment: Monero, Zcash, Bitcoin, $NYM, cash, GNU Taler
Weaknesses
- ✗Anonymous Mode's 5 hops add real latency vs a normal VPN
- ✗Younger product; smaller network and fewer consumer conveniences
- ✗No dedicated independent no-logs audit (protection is architectural); some past audits flagged backend issues since addressed
- ✗No OpenVPN; some features (split tunnelling) still in beta
Protocols & encryption
The tunnelling protocols this service offers and the cryptography behind them.
WireGuard
ModernA modern, lean protocol (~4,000 lines of code) that is fast and easy to audit. Its cryptography is fixed and state-of-the-art, with no weak options to misconfigure.
- Data cipher
- ChaCha20-Poly1305
- Key exchange
- Curve25519 (ECDH)
- Integrity
- BLAKE2s
- Stated data cipher
- ChaCha20-Poly1305 / AES-128
- Stated handshake
- Sphinx layered encryption; BLAKE2; post-quantum planned
- Perfect forward secrecy
- Yes
- Post-quantum resistant
- Yes
- RAM-only servers
- Unknown
- Kill switch
- Yes
- First-party DNS (leak protection)
- Yes
- IPv6
- Unknown
Post-quantum: Post-quantum key exchange via NymVPN's purpose-built Lewes Protocol, which layers an additional PQ secret key on top of the existing WireGuard/AmneziaWG-based key exchange (hybrid). Enabled by default for all Fast Mode connections as of the v2026.9 update; mixnet/Anonymous-mode PQ protection is a later phase.
Full data sheet
Every attribute we track, coloured by whether it helps or hurts your privacy.
| Based in | Switzerland |
| Eyes alliance | Outside 5/9/14 Eyes |
| Enemy of the Internet | No |
| Owner | Nym Technologies SA |
| Conglomerate | n/a |
| Founded | 2018 |
| Traffic / activity | None kept |
| DNS requests | None kept |
| Timestamps | None kept |
| Bandwidth | None kept |
| Source IP address | None kept |
Zero-knowledge architecture: Nym states no point on the network, neither Nym nor the node operators, can link your identity to your activity. zk-nym anonymous credentials decouple payment from traffic. The no-logs property rests on the decentralised mixnet design rather than a dedicated no-logs audit.
| Anonymous signup | Yes |
| Accepts cash | Yes |
| Accepts crypto | Yes |
| PGP key | Unknown |
| OpenVPN | No |
| WireGuard | Yes |
| Proprietary protocol | Nym Noise-Generating Mixnet, 5-hop Sphinx routing with cover traffic (Anonymous Mode); AmneziaWG/WireGuard 2-hop (Fast Mode) |
| Multi-hop | Yes |
| Obfuscation | Yes |
| Kill switch | Yes |
| First-party DNS | Yes |
| RAM-only servers | Unknown |
| Port forwarding | Unknown |
| P2P / torrenting | Unknown |
| IPv6 | Unknown |
| Data cipher | ChaCha20-Poly1305 / AES-128 |
| Handshake | Sphinx layered encryption; BLAKE2; post-quantum planned |
| Open-source clients | Yes, all apps |
| Independent audits | 3 |
| Transparency report | Unknown |
| Court / seizure-tested | Untested |
Not yet tested by a public seizure or subpoena; protection rests on a decentralised mixnet where node operators cannot see who is communicating with whom.
| Simultaneous devices | 10 |
| Countries | n/a |
| Servers | n/a |
| Linux support | GUI app |
| Month-to-month | $7.70 |
| Best $/mo | $2.25 |
| On plan | 2 years |
| Free trial | 7 days |
| Refund window | n/a |
| Free tier | No |
| Logging policy | Consistent |
| Marketing honesty | No overclaiming |
Independent audits
- Cure53· 2024 · Apps, backend/API, infrastructure & cryptography (generally strong posture; some medium-severity backend issues)report ↗
- Oak Security· 2023 · Protocol / cryptography
- JP Aumasson· 2021 · Cryptography
Built on the Nym mixnet (NYM token). Two modes: 2-hop 'Fast' (AmneziaWG/WireGuard) and 5-hop 'Anonymous' (Sphinx with continuous cover traffic). Up to 10 devices. Cure53's July 2024 assessment found a generally strong posture with some medium-severity backend DoS issues; the Coconut/e-cash cryptography was reviewed without exploitable leaks.
Sources
- Nym, official site ↗
- Nym, features (modes, kill switch, DNS, platforms) ↗
- Nym, pricing & payment methods ↗
- Nym, Cure53 security audit (July 2024) ↗
- nym-vpn-client (open source, Rust) ↗
- Nym Technologies, Wikipedia ↗
- Cybernews, NymVPN review ↗
Last verified 2026-06-18. Point-in-time data, so always confirm on the provider's own site.